pi-hole web

• CVE-2026-33405 Low 3.1 Pi-hole has a Stored HTML Injection in queries.js 0.2%
• CVE-2026-33406 Medium 5.4 Pi-hole has a Stored HTML attribute injection 0.3%
• CVE-2026-33404 Low 3.4 Pi-hole has a Stored XSS / HTML injection in the Network page/Dashboard 0.1%
• CVE-2026-33403 Medium 6.1 Pi-hole has a Reflected XSS / HTML injection in taillog.js 0.2%
• CVE-2026-33765 High 8.9 Pi-hole Web Interface has a Command Injection Vulnerability 1.3%
• CVE-2026-26953 Medium 5.4 Pi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions Table 0.3%
• CVE-2026-26952 Medium 5.4 Pi-hole Web Interface has Stored HTML Injection via Local DNS Records (CNAME/Hosts) in data-tag Attribute 0.3%
• CVE-2025-59151 High 8.2 Pi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection 0.4%
• CVE-2025-53533 Medium 5.1 Pi-hole Admin Interface vulnerable to cross-site scripting via malformed URL path on 404 error page 0.6%
• CVE-2025-32785 Low 2.0 Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field) 0.2%